Unscored CVE-2007-1976 EUVD-2007-1970GHSA-325v-5c6v-wv5g

PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops allows remote attackers to execute…

Published Apr 12, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfig[root_path] parameter. NOTE: the issue has been disputed by a reliable third party, stating that the application's checkSuperglobals function defends against the attack

References

3642 exploit
ADV-2007-1206 vdb-entry
37429 vdb-entry
xoops-virii-index-file-include(33368) vdb-entry
20070403 Bogus - [Xoops Module Virii Info <= 1.10 (index.php) Remote File Include Exploit] mailing-list
20070403 Bogus - [Xoops Module Virii Info <= 1.10 (index.php) Remote File Include Exploit] mailing-list